blofin-market-data
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill definitions are focused on retrieving public financial data from the BloFin exchange. No credentials are required, and no dangerous system commands or file operations are included. All tools utilize the blofin-mcp interface, which is a resource associated with the vendor blofin.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves data from external BloFin API endpoints, creating a potential ingestion surface for third-party content.
- Ingestion points: Market data is fetched via tools defined in SKILL.md, such as get_tickers, get_orderbook, and get_trades.
- Boundary markers: The instructions do not explicitly include delimiters for the tool outputs in the prompt templates.
- Capability inventory: The skill body contains no commands for file writing, arbitrary shell execution, or unauthorized network requests across its tool definitions.
- Sanitization: The skill does not describe specific sanitization for the returned market data.
- Risk Assessment: The risk is considered negligible because the API responses consist of structured financial values like prices, volumes, and timestamps, which are unlikely to contain executable natural language instructions targeting the agent.
Audit Metadata